Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

Filter by
Sorted by
Tagged with
0 votes
0 answers
3 views

Monitor keyboard access on the Windows lock screen [migrated]

I don't do this very often, but every time I lock the screen in Windows [Win+L], the keyboard (and sometimes the mouse) stops responding and it goes straight into the password field and it starts ...
user avatar
  • 3
1 vote
1 answer
80 views

What is a safe way to display malicious URLs in research PDFs?

Is there a convention or safeguard to show malicious URLs in a paper if they are relevant to the topic? Some PDF viewers parse the text for URLs, which makes removing the hyperlink alone insufficient. ...
user avatar
0 votes
1 answer
59 views

File sharing with compromised Windows machine

I want to connect a known to be compromised Windows machine to the network for file sharing, it has lots of pirated software installed therefor not secure. Can it be isolated so that nothing can ...
user avatar
  • 1
-1 votes
0 answers
46 views

How much more smartphone security am I getting by picking the Google Pixel 6 Pro vs others? [closed]

I am trying to decide between the Google Pixel 6 Pro vs the Samsung Galaxy S22 Ultra. Device security is very important to me, so much so that it could be the deciding factor for me with this choice. ...
user avatar
0 votes
0 answers
34 views

PDF security analysis tool for non-experts

I occasionally come across PDFs from shady sources. Is there a tool that a non-expert can use, which can check them for common vulnerabilities? I have seen this question: Malicious PDF Analysis but I'...
user avatar
0 votes
4 answers
154 views

If your router gets hacked, can the hacker acquire your RSA private key to decrypt HTTPS and view full URL's?

In order to decrypt HTTPS you need the public key and the private key. How can a hacker acquire the private key? What exactly does he have to do to get it? I read that they use packet sniffers like ...
user avatar
  • 11
0 votes
1 answer
72 views

Non executable virus?

Bitdefender detected .class -- File path: ...\tetra-1.12.2.jar => .../GuiStats.class -- Threat name: Java.Trojan.GenericGBA.31135 .tif -- File path: ...\crash-81154...60f8.tif -- Threat name: ...
user avatar
0 votes
1 answer
38 views

unknown (malicious?) code and file in public dir (Laravel 5.8, apache/cPanel) [duplicate]

I have a Laravel 5.8 app in a server running Apache/2.4.53 (cPanel) and PHP 7.4 (ea-php74) and i have VPS root WHM/cPanel access there. as any Laravel project, the "public" directory is web ...
user avatar
-1 votes
1 answer
87 views

Malware from Android text?

Lots of questions! I clicked a scam USPS link on my phone while half asleep. The website loaded and a small window popped up immediately and I quickly backed out of my browser but briefly saw the site ...
user avatar
0 votes
2 answers
68 views

How can a backdoor install a Chrome extension?

I read this: https://duo.com/decipher/malicious-chrome-extension-backdoor-uncovered-in-malware-campaign#:~:text=One%20of%20these%20is%20a,system%20and%20installing%20the%20extension. I quote this part ...
user avatar
  • 1
1 vote
2 answers
139 views

If someone knows your wifi password can they hack your router?

What exactly can someone do if they know your Wifi password? Can they only see which sites you visit or can they do more? Are they able to hack(router) and do malicious things with your router just by ...
user avatar
3 votes
2 answers
427 views

Has malware detected mitmproxy and similar tools used to intercept and analyze malicious traffic?

When trying to analyze malware, have there been cases where malware detected the use of mitmproxy and ceased operation? If that has happened, would it be a good idea to be constantly using a proxy as ...
user avatar
56 votes
3 answers
12k views

Does open source "protestware" represent a security risk?

Since the beginning of the Ukraine-Russian war, a new kind of software was created, which is called "protestware". In the best case, the devs only add some (personal) statements about the ...
user avatar
1 vote
2 answers
83 views

What are the issues with running a seemingly trustworthy python script from a stranger?

For context: in Sweden, the "end" of COVID has caused a huge buildup in passport applications, as everybody wants to resume travelling. However, due to the poor performance and general UX of ...
user avatar
2 votes
1 answer
75 views

Does malware ever check CPUID?

CPUID is an instruction that identifies CPU type and features. Has there ever been a case of either targeting or the opposite - ignoring of specific CPUIDs by malware in the wild?
user avatar
2 votes
1 answer
99 views

Has there ever seen a recorded case of a M.2 infected SSD firmware?

Was there ever been out-in-the-wild or any kind of detected firmware rootkit in an M.2 SSD?
user avatar
2 votes
2 answers
4k views

Microsoft Defender flagged Surfshark.exe as "Misleading:Win32/Lodi"

Can this be safely ignored? VirusTotal shows that Microsoft is the only security vendor that flagged this file as malicious. I did not modify my Surfshark installation in any way, except for an update ...
user avatar
0 votes
1 answer
85 views

safely storing untrusted files on a trusted machine

given a collection of files (text and binary) that are likely to have been modified by a resourceful and motivated adversary in a targeted attack, is there a security risk to copying that collection ...
user avatar
  • 1
3 votes
1 answer
186 views

How to protect yourself from firmware viruses

What componets of a PC do firmware viruses and rootkits infect? Secure boot is supposed to protect you from these types of viruses. Although, it doesn't protect you against rootkits in UEFI firmware ...
user avatar
0 votes
1 answer
95 views

Has there ever been a case of dangerous industrial malware, which would destroy motherboards and similar PC components and how to protect [duplicate]

I heard many years ago from word of mouth that this kind of malware exists, which could for example blow up capacitors in your PC. Has such malware or something even remotely similar ever existed? ...
user avatar
0 votes
1 answer
81 views

How does a malware usually figures if the machine is used for malware analysis?

Lately I've read a blog post for an advanced malware, that has a dropper that ensures that the victim machine is not used for malware analysis and if that's the case terminates. So I'm thinking that ...
user avatar
  • 1
0 votes
2 answers
73 views

Is this weird folder "Up8d76c_31187" a windows thing?

I noticed it becaue one of these exe's started running after a BSOD. Putting one of the exe's into VirusTotal gives it a 3/70. How can I examine this further? Edit: Other exe's are worse: VirusTotal ...
user avatar
  • 103
0 votes
0 answers
34 views

Malware link to QNap - What does this do?

I found shortcuts on shared drives in an org on the main drives (C,E,F,etc) but like so (.E, .F, etc). All of them have the ownership set to 'Everybody' only and only have read permissions, so unable ...
user avatar
0 votes
1 answer
86 views

How to store malware for analysis?

I am planning on analysing some malware samples dynamically using a sandbox tool and a target Windows VM. The host (physical machine) runs Ubuntu and in it are the sandbox and target VM. So far I only ...
user avatar
  • 1,145
1 vote
0 answers
43 views

What is the difference between malware signatures and malware artifacts?

I am trying to analyse some malware samples but I am trying to understand the differen between malware signatures and malware artifacts. As far as I understand (and from what I've understood from this ...
user avatar
0 votes
1 answer
87 views

The practicality that a home network / router gets compromised

I know that it's theoretically possible that a router can be hacked, and malware can be spread throughout a network merely by being connected to it. However, I'm wondering what exactly the chances of ...
user avatar
0 votes
0 answers
52 views

Can unzipping archive by itself cause malware execution? [duplicate]

It it possible to execute a malware just by unzipping a malicious zip archive? Like a malware would target some vulnerability in zip decompression routine. How common such an exploit would be in the ...
user avatar
0 votes
0 answers
42 views

What's the security implications of briefly connecting to a public wifi

Case study: Amazon Fire Stick accidently connects to a BT (UK "ISP") Open WiFi with no security. Upon connecting, the login screen of BT portal is presented, however, the user realising ...
user avatar
9 votes
2 answers
2k views

Clamav identifies Certbot files as infected

I ran Clamav on an Ubuntu 20.04 machine and it identified ten Certbot files as infected. /snap/certbot/1670/lib/python3.8/site-packages/pip/_vendor/distlib/t32.exe: Win.Malware.Generic-9937882-0 FOUND ...
user avatar
  • 193
0 votes
1 answer
209 views

Can my android phone get hacked if I share my hotspot?

I lent my mobile data to someone's computer and was not in the room while they were using it. Suppose they wanted to gain control/access to my android device. How easy would it be? As far as I know, ...
user avatar
1 vote
2 answers
133 views

What's the likelihood of a compromised computer compromising others on the network?

Today my grandparents connected to my WiFi, the password was given to them by my partner. Well, after looking at their PC, we established that they hired someone who has installed loads of stuff on ...
user avatar
  • 11
1 vote
4 answers
127 views

Is doc file really modifying registry in Windows?

Been given a .docx file to check whether it has a virus or something, ran McAfee and SuperAntiSpyware on it and results came back negative so I though it was good and proceeded to open it, just a file ...
user avatar
0 votes
1 answer
123 views

How to locate a malicious script in the Linux system

I would like to ask for some directions to trace back to the original (malicious) script on my system (Ubuntu Server). I would try to be more specific if needed. If the question does not fit this ...
user avatar
  • 111
0 votes
1 answer
85 views

Do viruses spread by infecting other files on an infected machine?

Suppose malware lands and executes on a computer. Could this malware attempt to spread further by writing itself to data files (images, pdfs, docs) and hoping that the owner would transfer or upload ...
user avatar
0 votes
0 answers
30 views

Weird Problem with Virtual Machine and Comodo

I am new to this forum and I have the following issue: Some days ago, I clicked on a pop up-window in my Linux-VM that said I need to Update some features or so ... after I clicked "Okay", ...
user avatar
  • 1
0 votes
1 answer
79 views

Preventing Windows from seeing/tampering with linux drive

Is there a way to prevent a Windows 10/11 system to access/modify/delete data from a secondary linux drive? I understand I can encrypt the linux drive, but wouldn't the windows system be still able to ...
user avatar
  • 1
2 votes
0 answers
109 views

Can a virus infect windows 10 bootable media?

I created a bootable windows 10 usb from my friend's computer. I used the official tool from microsoft. I was dumb enough to not check my friend's computer beforehand (turns out he had Utorrent Web ...
user avatar
0 votes
0 answers
51 views

Docker for canary file and virus detection

I am looking to create a pipeline for cleaning a large amount of files which may include files infected with viruses or canary tokens (to communicate with the attacker). My strategy at the moment is ...
user avatar
0 votes
1 answer
178 views

Can two antivirus softwares work on one android phone?

Scenario: You have one antivirus installed on your phone. You suspect that your phone might have malware on it so you do a system scan and your AV doesn't find anything. So you decide to download ...
user avatar
  • 1
0 votes
0 answers
32 views

How to permanently remove DDE Exploit:O97M/DDEDownloader.C? Do I need to nuke my computer? Is it safe to not do so? [duplicate]

1Starting yesterday windows defender has found and quarantined 5 copies (pic 1) of the following threat (pic2) Exploit:O97M/DDEDownloader.C see here. I tried contacting Microsoft tech support but they ...
user avatar
  • 1
0 votes
1 answer
73 views

Malware dropper uses "^" character in syntax of cmd.exe before calling mshta.exe to download file?

I found a malicious Excel file that was using an embedded HTA program as its dropper to download a powershell program from a malicious IP. The dropper was on a hidden sheet in the file. After ...
user avatar
  • 1
-2 votes
1 answer
175 views

Infecting files on GitHub

Suppose one uploads (carelessly or purposefully) a file with a malicious payload to their Github account (some pdf document, picture, etc.). Could this payload somehow be executed on the Github ...
user avatar
0 votes
2 answers
75 views

Will setting up an installation on an SD card in this way prevent changes to the operating system?

I want to set up an SBC, e.g. Raspberry Pi, Banana Pi, to work as close as possible to a computer running a Live Distro. I'm intending to use this to inspect suspicious or infected storage drives and ...
user avatar
1 vote
1 answer
149 views

Mp4 virus scanners

I used to download a lot of mp4's from untrusted sources. But I discovered that they could contain malware. I would like to know if there are any methods to clean or to check video files for malware.
user avatar
  • 11
1 vote
2 answers
149 views

Is it safe to view infected word documents in office online?

Can viewing and editing a potentially infected microsoft word document (with images inside) on a web-based platform like office online (OneDrive) infect my pc? How does the browser running on my ...
user avatar
0 votes
0 answers
16 views

Can virus escape virtualbox? [duplicate]

I have a suspicious mp4 file. I scanned with Bitdefender, Kaspersky, and windows defender. I also update my windows10 regularly. I downloaded virtualbox ubuntu and disabled network and file sharing ...
user avatar
1 vote
2 answers
157 views

How do I activate a malware inside a virtual machine?

I have been doing research on malware detection and my current setup is: one host OS (Ubuntu 18.04) and one guest OS (Ubuntu 18.04) inside VirtualBox. I have downloaded and executed some malware (...
user avatar
2 votes
2 answers
156 views

How to create a safe environment in Windows 10 for high-performance programs?

My friend handed me a .exe file of an old game we want to play together. My laptop has important files, so I do not want to install it immediately. I am still sceptical that he might not know it ...
user avatar
  • 21
0 votes
0 answers
108 views

Sextorsion then Trojan

I received an email containing blackmail about videos that the hacker said he recorded. He said that he recorded the user of the laptop masturbating and he is asking for money to delete them otherwise ...
user avatar
1 vote
3 answers
378 views

Mistyped "google" and came to a suspicious page with a browser hijacker

I misspelt google as "googe" (very dumb, yes). It took me to a page that asked me to enter my birthdate. The URL was something along the lines of luj dott proasdf dott com After going to ...
user avatar
  • 111

1
2 3 4 5
48